Medium severity5.3NVD Advisory· Published Dec 14, 2024· Updated Jun 17, 2026

CVE-2024-11712

Description

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getResumeFileDownloadById() function in all versions up to, and including, 2.2.2. This makes it possible for unauthenticated attackers to download other users resumes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Job Portalllm-fuzzy2 versions
<=2.2.2+ 1 more
- (no CPE)range: <=2.2.2
- (no CPE)
Package: https://wordpress.org/plugins/wp-job-portal
Wpjobportal/WP Job Portal – A Complete Recruitment System for Company or Job Board websitecpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3202327/wp-job-portal/tags/2.2.3/modules/resume/model.phpnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/ecc87d5f-dba4-40f8-946f-f2634614b579nvdThird Party Advisory
gist.github.com/g1-nhantv/245d2829c1b489f61c9124086506b6b8nvdRelated
gist.github.com/g1-nhantv/7a26a9681eb3413d8be9323fb151fdcdnvdRelated

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000